Low Risk 

Description

W32/Autorun-DW is a worm which spreads by copying itself to removable devices as the file setup.exe. W32/Autorun-DW copies itself to <System>\svchost32.exe and creates the following registry entry to run itself on restart: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run MyApp <System>\SVCHOST32.EXE The worm also creates the following registry entry: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion MyDate 09-Aug-08.

References

http://www.sophos.com/security/analyses/viruses-and-spyware/w32autorundw.html

Credits

Reported by Sophos

ChangeLog

2008-05-12 - Initial Release

Disclaimer

The information contained herein was obtained from third party sources and is solely based upon the data available at the time of publication.